Managed Mode

In Managed mode, Eucalyptus manages the local network of VM instances and provides all networking features Eucalyptus currently supports, including VM network isolation, security groups, elastic IPs, and metadata service. Configure each CC to use an Ethernet device that lies within the same broadcast domain as all of its NCs.

Important

In Managed mode, each security group requires a separate subnet and a separate VLAN that Eucalyptus controls and maintains. So the underlying physical network must be “VLAN clean.” For more information about VLAN clean, see Prepare VLAN.

To configure for Managed mode:

CLC Configuration

No network configuration required.

CC Configuration

Important

You must set VNET_PUBLICIPS identically on all CCs in a multi-cluster configuration.

Go to the Network Configuration section, uncomment and set the following:

VNET_MODE="MANAGED"

VNET_SUBNET="<subnet for instances’ private IPs. Example: 192.168.0.0>"
VNET_NETMASK="<your netmask for the vnet_subnet. Example: 255.255.0.0>"
VNET_DNS="<your DNS server’s IP>”
VNET_ADDRSPERNET="<# of simultaneous instances per security group>"

VNET_PUBLICIPS="<your_free_public_ip1 your_free_public_ip2 …>"

VNET_LOCALIP="<the IP of the local interface on the cc that is reachable from CLC>"

VNET_DHCPDAEMON="<path to DHCP daemon binary. Example: /usr/sbin/dhcpd3>"

VNET_DHCPUSER="<DHCP user name. Example: dhcpd>"

If your NCs are not reachable from end-users directly and the CC has two (or more) Ethernet devices of which one connects to the client/public network and one connects to the NC network, or the single Ethernet device that the CC uses to connect to both clients and NCs is NOT ‘eth0’, then you must also uncomment and set:
```
VNET_PRIVINTERFACE="<Ethernet device on same network as NCs. Example: eth1>"

VNET_PUBINTERFACE="<Ethernet device on ‘public’ network. Example: eth0>"
```
Save the file.

Repeat on each CC in your system.

Important

Each CC must have the same configuration with the exception of the VNET_LOCALIP value, which should be machine-specific.

NC Configuration

Log into an NC machine and open the /etc/eucalyptus/eucalyptus.conf file.

Go to the Network Configuration section, uncomment and set the following:

VNET_MODE="MANAGED"
VNET_PUBINTERFACE="<Ethernet device/bridge reachable from cc machine. Example: eth0>"

Save the file.
Repeat on each NC.